Sign in
Auth

Sign in with email and password; mint an httpOnly session cookie

Changed on

Validates email + password, mints a server-side session row, and sets Set-Cookie: velox_session=...; HttpOnly; SameSite=Lax; Path=/. Subsequent dashboard requests authenticate via the cookie; sessions are bound to users.id and are independent of API key lifecycle. See ADR-011.

post/v1/auth/login

Request

  • Base URL: http://localhost:8080
  • URL: http://localhost:8080/v1/auth/login
  • Auth: HTTP bearer

Request body

emailstring email required
passwordstring required

Response

Session minted; cookie set on response

user_idstring required
tenant_idstring required
emailstring required
livemodeboolean required
expires_atstring date-time required

Changes